Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32322d3234203d3e20313334353938.roa
File: 3130332e3132312e34302e302f32322d3234203d3e20313334353938.roa (raw, json)
Hash identifier: Ddktkcd16QcSCvu54813g6BuPWL6WSowRY77iHz35sQ=
Subject key identifier: F1:C0:E7:31:2F:7B:95:C8:7E:9D:9F:B2:C2:FA:0F:53:A6:51:5D:04
Certificate issuer: /CN=A916C10F0000/serialNumber=8C0E373D1F19183CF1BD8220B14020B8BF2C674D
Certificate serial: 4EB53BEC02A48AB6FBA593A0E8E8AB0D57246E16
Authority key identifier: 8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32322d3234203d3e20313334353938.roa
Signing time: Thu 11 Apr 2024 18:04:38 +0000
ROA not before: Thu 11 Apr 2024 17:59:38 +0000
ROA not after: Thu 10 Apr 2025 18:04:38 +0000
asID: 134598
IP address blocks: 103.121.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b5:3b:ec:02:a4:8a:b6:fb:a5:93:a0:e8:e8:ab:0d:57:24:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C10F0000
Validity
Not Before: Apr 11 17:59:38 2024 GMT
Not After : Apr 10 18:04:38 2025 GMT
Subject: CN=F1C0E7312F7B95C87E9D9FB2C2FA0F53A6515D04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:44:c4:5a:0b:7d:c7:7f:35:25:a7:e6:a3:a0:
d3:6b:c6:3d:56:ec:74:88:66:2e:22:76:2c:52:3b:
c3:8d:55:fd:03:3c:12:9f:f8:3e:21:e0:46:dc:5d:
25:af:a7:59:fc:6e:4a:69:25:cf:7d:5c:3d:00:43:
52:53:02:21:9f:65:1c:5c:64:9e:8a:46:a1:48:2b:
f2:b7:1c:bb:62:f2:dd:32:e1:aa:fa:6a:41:42:ae:
36:72:13:9d:11:b9:84:6f:fe:6c:f8:c1:b8:30:07:
1a:f2:9c:b4:a8:fb:6e:78:9c:90:e2:cc:0f:57:8c:
4f:06:66:c0:5f:58:eb:59:4e:73:ca:68:08:20:ab:
da:16:7e:7d:dc:a5:f9:8d:04:72:a0:7e:7f:70:a1:
cc:70:1d:12:4e:b8:e1:b8:60:ef:f1:6b:84:95:ef:
0d:70:58:99:33:e2:35:9b:40:6e:59:e1:fd:30:7f:
ff:b6:48:75:89:90:7d:ad:81:74:f2:a3:57:aa:aa:
c6:5a:4b:cf:69:fd:78:63:10:98:c4:27:bf:69:04:
7b:8d:75:b3:b1:a9:f2:f9:d5:53:01:99:44:de:14:
e0:78:ef:e7:96:54:e5:7b:ca:19:d9:25:5f:1b:98:
de:81:ac:c9:99:56:b4:fe:dc:40:d9:01:f5:11:08:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:E7:31:2F:7B:95:C8:7E:9D:9F:B2:C2:FA:0F:53:A6:51:5D:04
X509v3 Authority Key Identifier:
keyid:8C:0E:37:3D:1F:19:18:3C:F1:BD:82:20:B1:40:20:B8:BF:2C:67:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/8C0E373D1F19183CF1BD8220B14020B8BF2C674D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jA43PR8ZGDzxvYIgsUAguL8sZ00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/3/3130332e3132312e34302e302f32322d3234203d3e20313334353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.40.0/22
Signature Algorithm: sha256WithRSAEncryption
02:7b:b3:28:4e:83:6a:f8:43:1d:6d:34:6f:bc:d6:e4:8f:7d:
22:0b:0c:36:77:49:2a:6e:7a:66:96:c6:a3:aa:93:36:13:f8:
a3:19:d7:fa:df:ee:8a:b9:4c:62:3a:ae:33:c2:ee:6a:4f:f1:
58:a6:c3:94:bc:72:3c:5d:5d:c5:b6:1f:34:dd:40:82:17:19:
77:e6:f1:f9:2e:79:03:1d:22:ea:27:9c:df:46:fa:f7:e8:24:
b7:46:5d:b8:ee:5a:41:a5:1a:65:1c:72:c0:36:eb:29:c2:3b:
29:ec:21:8c:5f:7e:e2:03:34:ab:7e:64:aa:de:43:16:2e:2e:
64:cb:8c:5f:cd:6c:da:3e:f8:99:56:00:67:17:48:58:e0:17:
bc:ae:7c:d4:8e:46:65:d2:57:9a:09:56:bb:4a:f3:e6:a6:73:
e4:e9:ac:f7:09:f9:ab:3d:4a:cc:2b:fd:d5:f2:96:4e:15:3f:
9c:90:d8:bf:d0:a6:58:40:d7:bb:aa:fd:76:1e:4f:35:bf:f1:
da:26:8b:bc:74:1a:02:8b:46:8d:ef:32:d5:0f:67:04:1f:db:
f4:32:e4:22:53:50:99:e5:0e:55:c4:8f:27:0e:93:f7:90:1c:
b8:39:a5:e6:12:93:3a:6a:34:32:fc:92:70:c2:32:5e:b6:0a:
ca:a8:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:39 2025 by rpki-client